Not as far as we're aware; the main login method used by the Pandora web
client sends the password symmetrically encrypted.

We'll look into possibly logging in via SSL and transferring from an
HTTP cookie to a LSO, but the protocol's use of blowfish means that the
authentication token (be it password or cookie) can be sniffed
regardless.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/733307

Title:
  password stored in plaintext in $HOME/.config/pithos.ini

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to